Personal Data Protection Policy
Preamble
This "Personal Data Protection Policy" document concerns any individual (hereinafter "Individuals") whose Personal Data may be processed by LEGACIO in accordance with the General Data Protection Regulation (GDPR) adopted on 27 April 2016 by the European Parliament and the Council, and the French law of 30 July 2018.
As part of your visit to our website, LEGACIO (hereinafter "we") collects your Personal Data in order to use it for various automated processing operations.
The Processing of your Personal Data
Definitions
Personal data (hereinafter "Personal Data") refers to any information that may relate to an identified or identifiable individual, directly or indirectly.
DPO : The Data Protection Officer (DPO) is responsible for implementing compliance with the European data protection regulation within the organization that appointed them, for all processing carried out by that organization. DPO contact details: [email protected]
Data Controller The data controller is the legal or natural person who determines the purposes and means of processing. In practice, this is generally the legal entity represented by its legal representative. The data controller is the company ENAOS.NET FRANCE.
Our commitments
We process your Personal Data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, hereinafter referred to as the "GDPR".
We are committed to protecting your personal data. Only our authorized staff, trained in confidentiality rules, take part in operating the site.
In addition, LEGACIO implements appropriate technical and organizational measures to prevent the loss, misuse, alteration and deletion of your Personal Data. These measures are adapted to the level of sensitivity of the data processed and the level of risk presented by the processing or its implementation.
Should a breach affecting your data occur, LEGACIO will inform you within the timeframes and according to the procedures specified by applicable laws and regulations.
Article 13 of the GDPR requires us to inform you of the following:
- The identity and contact details of the data controller and, where applicable, of the controller's representative;
- The purposes of the processing for which the Personal Data is intended, as well as the legal basis for the processing;
- The recipients or categories of recipients of the Personal Data, if any;
- The retention period for the Personal Data or, where this is not possible, the criteria used to determine that period.
The Personal Data We Process
We collect and process the following Personal Data:
| Personal Data collected | Purpose | Legal basis | Retention period |
|---|---|---|---|
| Data collected through the "Request a callback" and "Contact us" forms: First name, Last name, Phone number, Reason for the request | Managing contact forms | Legitimate interest | 3 years from the last contact. Immediately in the event of exercise of the right to object. |
| Data recorded when you browse our website: IP address | Managing visitor browsing information | Legitimate interest | 1 year from collection |
To learn more about data processing through the use of cookies, please consult our cookie policy.
Recipients of Personal Data
The Personal Data collected on this website is primarily intended for LEGACIO, but may be shared with our partners.
The list of our partners, providers and subcontractors likely to process your personal data is available in the table below.
| Partner / Provider / Subcontractor | Purpose |
|---|---|
| Heroku | Hosting |
We ensure that all our partners and subcontractors are subject to adequate GDPR-compliant personal data protection mechanisms, and that data is processed only by authorized staff bound by a confidentiality clause or an equivalent contractual document.
Exercising your GDPR Rights
Right of access and rectification
You have the right to obtain confirmation from the data controller as to whether or not Personal Data concerning you is being processed and, where it is, the right to access it and/or have it rectified. (See Articles 15 and 16 of the GDPR.)
Right to erasure
In accordance with Article 17 of the GDPR, you have the right to request the erasure of your Personal Data as soon as possible, on certain grounds / subject to certain conditions which you can consult in that article / in the cases provided for by that article.
Right to restriction of processing
You have the right to request that we restrict the processing of your Personal Data in the cases provided for by Article 18 of the GDPR.
Right to object to processing
In accordance with Article 21 of the GDPR, you have the right to object to processing of Personal Data concerning you where the processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, unless overridden by the interests or fundamental rights and freedoms of the data subject, in particular where the data subject is a child.
Right to data portability
You have the right to data portability, which allows you to receive the Personal Data you provided to us in a structured, commonly used and machine-readable format, and to transmit that data to another controller. The exercise of this right is subject to the conditions set out in Article 20 of the GDPR.
Right to withdraw consent
In accordance with Article 7 of the GDPR, where processing is based on consent, you have the right to withdraw your consent at any time. This will end the processing of your data.
You may exercise your rights as follows: by sending your request to the following email address: [email protected], or by mail accompanied by a copy of an identity document addressed to ENAOS.NET FRANCE at the following address: 1 RUE DES VANNIERS, 08140 DOUZY.
You may also lodge a complaint with the French data protection authority (CNIL).
Updates
In order to comply with regulatory changes and reflect our practices, we reserve the right to modify this policy. We will publish any changes in this document; we recommend that you consult our privacy policy regularly.
Last updated: 15/09/2026